Privacy Policy

Floffy is operated by Bitsmart Global LLC(“Floffy,” “we,” “us”). This Privacy Policy explains what information we collect, how we use it, and the choices you have. Questions: hello@floffy.app.

Information we collect

• Account information: name, username, email address, date of birth (for age eligibility), gender, and password.
• Profile information you choose to provide, such as a photo, bio, location (city/state and time zone — we do not collect precise GPS geolocation), the services you offer, and optional details you may add to your profile (for example, sexual orientation).
• Identity-verification information (where you choose to verify, a government ID you upload so our staff can confirm you are a real adult; the ID image is reviewed manually by our team and then deleted — we do not use facial recognition or create any biometric template. We keep only the fact and date that verification was completed, not the document itself).
• Payment data: subscription payments are processed by third-party processors (e.g., Stripe, and Apple for in-app purchases). We receive limited transaction and status information and do not store full payment-card numbers.
• Safety-contact information you voluntarily add: the name, mobile number, and email of a person you designate to be alerted for your safety.
• Usage and device data needed to operate the service (e.g., log data, session activity).
• Technical log data recorded automatically when you use Floffy, including your IP address, browser and device type, and the pages or actions requested. Server access logs are kept for about 14 days; security and audit records, which we keep to investigate abuse and protect accounts, are retained longer.
• Aggregate sign-up statistics: when an account is created we look up the U.S. state associated with the IP address and add one to a running total for that state. Only the totals are stored. The IP address is discarded immediately, nothing is written against your account, and the figures are not tied to you or to any individual — they tell us only how many people signed up in a given state in a given month.

Information we do not request or use

We do not request, and do not use, health data, racial or ethnic origin, religious or philosophical beliefs, political opinions, biometric identifiers, or precise GPS geolocation, and we do not provide fields designed to collect this information. If you voluntarily include such details in a free-text field — for example, a booking note or a message — we do not solicit or use them to infer any characteristic about you; they are handled only as ordinary message or profile content. Information that may constitute “sensitive personal information” under applicable law includes the government ID used for verification (deleted after review) and any optional profile details you choose to display publicly, such as sexual orientation, which we store and show only as part of your profile and never use to infer other characteristics or for advertising.

How we use information

• To operate the marketplace: create your account, show profiles, enable bookings and messaging.
• To send service notifications by email and push (e.g., messages, bookings, account alerts).
• To send safety alerts: if you add a safety contact and they confirm, and you begin a session but do not confirm you are safe afterward, we may place an automated phone call and/or send an email to that contact asking them to check on you.
• To screen messages for prohibited content and platform safety, including automated review and, when flagged, human moderator review.
• To keep the platform safe and comply with the law.

Text messaging & phone numbers

Mobile phone numbers are collected only to deliver the service requested (account notifications and the safety-alert program described in our Safety Alert Terms). We do not sell your information, and phone numbers collected for safety alerts are never shared with third parties or affiliates for their marketing purposes. No phone information is shared with third parties except the phone carriers and our telephony provider strictly to place the automated safety calls you have consented to receive.

Profile visibility

Client profiles are not public.

Clients never appear in Browse or in any search on Floffy — only cuddler profiles are listed. Client profiles are also excluded from search engines, so they do not appear in public search results. A client's profile is visible only to cuddlers they choose to contact.

Cuddler profiles are listed on Floffy so clients can find them, and a cuddler can pause or hide their profile at any time from their account settings. Cuddler profiles are likewise excluded from search engines: no member profile of either kind is indexed.

Sharing

We share data only with vendors that help us run the service (hosting, email delivery, payment processing, and automated-call delivery), each under contract and only as needed to provide the service, or when required by law. We do not sell personal information.

Your choices

• You can edit or remove your safety contact at any time in your profile settings.
• A safety contact can withdraw their consent at any time by emailing hello@floffy.app; see our Safety Alert Terms.
• You can request deletion of your account; deletion is processed after a 30-day grace window.
• Contact hello@floffy.app for any privacy request.

Your privacy rights

Residents of US states with comprehensive consumer-privacy laws — including California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and others in effect — have the following rights, subject to their state’s law and to identity verification:

• Know / access the personal information we hold and how we use and disclose it.
• Delete your personal information.
• Correct inaccurate personal information.
• Portability — receive a copy of your information in a portable format.
• Opt out of the sale or sharing of personal information, and of targeted advertising and certain profiling — Floffy does not sell or share personal information or engage in targeted advertising or such profiling, so there is nothing to opt out of.
• Limit the use of sensitive personal information — we already use any such information only for the purposes described above, never for advertising or to infer characteristics.
• Non-discrimination for exercising these rights.

To exercise these rights, email hello@floffy.app or use your in-app account settings. We verify your identity before responding and reply within the time your state’s law requires (for California, generally within 45 days, extendable once). You may use an authorized agent with proof of authorization. If we decline a request, you may appeal by replying to our decision. California residents have a limited private right of action for certain data breaches.

Data retention & security

We keep information for as long as your account is active. When you request deletion, your account and associated data are permanently deleted after the 30-day grace window, except for limited records we are required or permitted to retain: records we must keep to comply with law or legal process (including child-safety reports and any related preservation obligations), a minimal record needed to enforce our Terms and to prevent a removed user from re-registering, and information reasonably necessary to detect and prevent fraud, abuse, or security incidents. Any such retained information is limited to these purposes and is deleted when it is no longer needed for them. Identity-verification documents are deleted after review. We use industry-standard safeguards to protect your data.

Service availability

Floffy is offered only in the United States and is intended for United States residents.

Children

Floffy is strictly for adults 18 and older. We do not knowingly collect information from minors.

Changes

We may update this policy and will revise the date above. Material changes will be communicated through the service.